$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223a3bde-4871-384e-8a5a-b078a2c2bbba.roa File: 223a3bde-4871-384e-8a5a-b078a2c2bbba.roa (raw, json) Hash identifier: HBOa5zXNkbz75HQe/WEmbsxBUJEWdFXC3iAxSvZM3nc= Subject key identifier: 6E:45:78:23:5B:B7:B4:EA:09:D5:5F:F4:76:A9:BE:E2:43:64:1D:12 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAAC425CDDA8092F180500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223a3bde-4871-384e-8a5a-b078a2c2bbba.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 400765 IP address blocks: 2001:470:a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:ac:42:5c:dd:a8:09:2f:18:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=db6c9883-e7b0-4e36-965d-999441be06d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7a:9e:8c:1d:9e:04:d2:68:4b:b2:86:02:1b: 0f:ea:43:cf:c9:9a:33:34:50:8a:8d:12:74:73:fa: af:d7:d2:45:1f:48:57:ca:91:61:a9:e5:19:bd:fa: e2:aa:b7:54:30:c7:0f:66:c2:14:9e:a5:84:f0:4c: f0:83:1c:33:d7:d1:1e:ac:e6:88:62:fd:f3:e1:bd: 8c:75:1f:e5:49:d6:63:8f:b4:5f:e6:bf:b7:7c:bf: a9:5b:0e:c2:47:c6:c9:63:26:07:d4:2e:56:0f:9a: a5:e4:18:c4:e5:1e:b9:ff:92:88:63:34:c7:15:55: 48:cc:bc:ae:06:0e:34:dd:42:de:3a:19:b7:60:f7: ae:28:da:bb:94:78:9c:fd:20:ec:ed:be:00:47:aa: 9f:10:48:59:ec:bc:a3:f5:45:d3:e1:a7:d1:74:d1: ac:8d:fd:5d:db:c2:57:69:f4:a7:08:aa:b4:c3:f9: 93:53:38:88:49:03:08:a5:08:34:1c:95:7f:05:13: 7a:82:55:bc:5a:34:60:58:46:b4:73:4b:2d:8a:59: cd:87:31:9f:ec:0f:92:2f:28:81:bb:09:d2:83:64: a1:ce:b2:c7:87:4e:81:86:89:e6:97:28:55:00:71: 5b:a4:3c:f9:18:64:37:10:56:40:ae:e3:8a:90:ff: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:45:78:23:5B:B7:B4:EA:09:D5:5F:F4:76:A9:BE:E2:43:64:1D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223a3bde-4871-384e-8a5a-b078a2c2bbba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4d:5f:2d:6a:18:b8:f0:8b:ce:5c:3a:10:87:87:51:cd:fd: c3:5f:a0:e8:31:7c:62:bd:c3:b5:be:45:ee:6c:11:aa:0d:0e: e7:94:d4:a9:d8:29:ab:82:f4:6e:e2:62:e1:35:6f:65:92:c9: 6f:69:b9:b4:f5:f3:8a:c2:41:60:04:2e:1d:6e:37:72:de:59: fd:e2:36:8a:8e:a7:c8:2f:dd:63:5c:c6:6a:c1:ba:d2:6f:a0: f0:85:d6:b0:e3:bb:3c:63:db:7d:12:1d:fb:08:78:6e:97:cf: 2a:a5:72:99:a2:2c:d7:04:87:2d:dd:3f:00:73:0d:16:3d:c9: ef:2a:08:ec:ed:0f:65:af:53:ca:b4:1a:86:b8:f0:d8:42:d4: f3:5a:ae:1c:11:03:dc:f9:02:92:77:0a:5b:5b:be:45:e0:7f: 82:92:20:54:cc:a5:47:c0:31:ad:98:e7:8e:45:6e:9e:13:8a: f1:2c:f2:a3:7c:d3:76:a5:d7:58:18:8f:d9:de:1e:18:2f:dc: 22:f3:d0:7a:a5:ab:5a:8a:fc:a3:4f:99:5f:91:95:75:c8:b8: 78:19:89:18:0d:e2:fa:27:d2:68:c7:f5:78:04:00:21:fa:5f: 5e:a5:b9:a0:39:f3:4a:4e:f8:a6:c9:02:b1:58:d7:7c:2a:0b: 60:d5:e6:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qxCXN2oCS8YBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZGI2Yzk4ODMtZTdiMC00ZTM2LTk2NWQtOTk5NDQxYmUwNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nqejB2eBNJoS7KGAhsP6kPPyZozNFCKjRJ0 c/qv19JFH0hXypFhqeUZvfriqrdUMMcPZsIUnqWE8Ezwgxwz19EerOaIYv3z4b2M dR/lSdZjj7Rf5r+3fL+pWw7CR8bJYyYH1C5WD5ql5BjE5R65/5KIYzTHFVVIzLyu Bg403ULeOhm3YPeuKNq7lHic/SDs7b4AR6qfEEhZ7Lyj9UXT4afRdNGsjf1d28JX afSnCKq0w/mTUziISQMIpQg0HJV/BRN6glW8WjRgWEa0c0stilnNhzGf7A+SLyiB uwnSg2ShzrLHh06BhonmlyhVAHFbpDz5GGQ3EFZAruOKkP803QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG5FeCNbt7TqCdVf9HapvuJDZB0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjIzYTNiZGUtNDg3MS0z ODRlLThhNWEtYjA3OGEyYzJiYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB1NXy1qGLjwi85cOhCHh1HN/cNfoOgxfGK9w7W+Re5sEaoNDueU 1KnYKauC9G7iYuE1b2WSyW9pubT184rCQWAELh1uN3LeWf3iNoqOp8gv3WNcxmrB utJvoPCF1rDjuzxj230SHfsIeG6XzyqlcpmiLNcEhy3dPwBzDRY9ye8qCOztD2Wv U8q0Goa48NhC1PNarhwRA9z5ApJ3CltbvkXgf4KSIFTMpUfAMa2Y545Fbp4TivEs 8qN803al11gYj9neHhgv3CLz0Hqlq1qK/KNPmV+RlXXIuHgZiRgN4von0mjH9XgE ACH6X16luaA580pO+KbJArFY13wqC2DV5g0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:17:23 2026 by rpki-client